Privacy Policy
This Privacy Policy explains how Justin P. Harper, a Massachusetts sole proprietor operating the Prayer Tracker service (“Prayer Tracker,” “we,” “us,” or “our”), handles information through the mobile app, personal web app, public website, Church Suite, public church pages and forms, support channels, and related services (collectively, the “Services”). It applies to personal users, church members and administrators, public submitters, and visitors.
Our Data Roles
Prayer Tracker determines the purposes and means for direct account administration, authentication, security, service diagnostics, support, Personal Premium operations, legal compliance, fraud prevention, and platform-level records. For those activities, Prayer Tracker acts as a controller, business, or similarly responsible organization under applicable law.
A church determines why and how it manages church members, church-owned groups and content, public prayer intake, visibility, contact, assignments, and ministry follow-up. For those church-directed activities, the church acts as controller or business and Prayer Tracker processes information on its instructions as processor or service provider. The Data Processing Addendum governs that processing. A role may differ for a particular activity because roles follow the actual purpose and decision-making.
Information We Handle
Depending on how you use the Services, Prayer Tracker may handle:
- Account information: email address, name, sign-in provider, language, identifiers, authentication and email-verification status.
- Personal prayer content: requests, updates, categories, reminders, journal, handwriting, activity, and answered-prayer records.
- Shared-group content: names, memberships, invitations, roles, requests, updates, testimonies, and participation settings.
- Church Suite information: organization profile and branding, public contact details, roles, membership requests, invitations, assignments, administrative actions, reports, exports, plan limits, and billing status.
- Public submissions: prayer text, name, optional email or phone, privacy and contact choices, display choice, status, review actions, and original and approved versions when redaction occurs.
- Purchase information: product, plan, subscription and transaction identifiers, verified entitlement or subscription status, renewal or expiration, store country or currency, tax status, and billing events. Prayer Tracker does not receive full payment-card details.
- Support information: name, email, church or organization, topic, message, and related correspondence.
Automatic and Technical Information
Core service providers may process device and browser type, operating system and version, language, IP address, approximate region, service identifiers, dates, diagnostics, error and security events, push tokens, and subscription events needed to authenticate, secure, deliver, troubleshoot, and operate the Services.
Public forms use human-verification, a hidden trap, rate limits, and network controls. A one-way network-address hash and timing information may be stored to prevent abuse; that rate-limit record does not contain the submitted message.
How We Use Information
Prayer Tracker uses information to provide, synchronize, secure, troubleshoot, and support the Services; authenticate accounts; operate personal, shared-group, Church Suite, public-submission, reporting, export, branding, billing, audit, and deletion features; enforce permissions and limits; deliver notices and support; verify purchases and subscription status; prevent fraud and abuse; and comply with law.
Prayer Tracker does not sell or rent personal information, does not use advertising networks, and does not use prayer text, journal content, private group content, or sensitive spiritual information for advertising, behavioral profiling, or inferred targeting.
Sensitive Prayer Content
Prayer and journal content may reveal religious beliefs, health concerns, family circumstances, or information about another person. Share only what is necessary and what you are authorized to provide. Prayer Tracker uses this content only to provide, secure, and support the features you choose and does not claim that the Services are subject to HIPAA.
Personal, Group, and Church Visibility
Personal prayers, journal, tags, reminders, personal groups, and personal subscription information remain separate from church administration. A church cannot access personal content merely because a person belongs to it.
Shared-group content is visible only to authorized group members. Organization membership does not grant access to every church group; an active, explicit assignment is required. Owners and administrators may manage assignments without automatically receiving content access.
Church-owned content remains with the organization when personnel change. Authorized representatives may manage records, roles, status, aggregate reports, and exports according to permissions. Exports exclude unrelated personal content.
Public Prayer Requests
Public forms may be used without an account. Unauthenticated submissions enter a restricted review queue and never publish automatically. Authorized reviewers may see an original and contact details, redact an approved version, route or publish according to privacy and church policy, contact the submitter, decline, archive, or mark the request answered.
Contact information is not published automatically. Selecting an anonymous display option does not hide supplied contact details from authorized reviewers. Restricted or anonymous notifications omit prayer text, names, email addresses, and phone numbers.
Children and Minors
The Services are intended for a general audience, not directed to children under 13, and Prayer Tracker does not knowingly permit accounts or collect personal information from children under 13. Churches are responsible for appropriate parent, guardian, or organizational authority before inviting a minor or entering information about a minor. Contact Prayer Tracker if you believe information about a child under 13 was provided improperly so it can be reviewed and deleted where appropriate.
Purchases and Billing
Apple or Google processes Personal Premium purchases and cancellations. RevenueCat supports offer presentation, purchase validation, restoration, entitlement management, and subscription operations. It receives identifiers and subscription status, not prayer or journal content.
Church billing, when activated, uses Stripe Managed Payments through the web administration portal. Purchasing remains unavailable until activated. Stripe may process payment and Link information. Prayer Tracker receives limited customer, plan, invoice, transaction, tax, subscription status, and event data needed to operate Church Plans, but not full card details. Verified Stripe state—not refund status alone—controls Church entitlement. Taxes depend on the transaction, provider, and jurisdiction.
Analytics, Storage, Diagnostics, and Notifications
Prayer Tracker uses Google Analytics 4 only on public informational pages to understand page views, public page paths, referring sites, conventional campaign tags, approximate geography, and device, browser, operating-system, and screen-size categories. Arbitrary URL query strings are discarded before measurement; only conventional campaign tags such as utm_campaign and utm_source may be included when supplied.
For visitors in the European Economic Area, United Kingdom, and Switzerland, analytics storage is denied by default and Google Analytics is not loaded unless the visitor selects Allow analytics. A visitor may decline or reopen Analytics choices later. If the regional check is unavailable, Prayer Tracker applies this same consent-first behavior. Where this regional prompt is not required, Google Analytics loads on the public informational pages described above. Google Analytics may set first-party _ga cookies after analytics is allowed or enabled.
Advertising storage, advertising user data, advertising personalization, remarketing, and Google Signals remain disabled. Analytics is not loaded on the signed-in personal web app, Church administration portal, authentication/action pages, or Church and prayer routes, and Prayer Tracker does not send prayer text, account content, or advertising identifiers to public-site analytics. Cloudflare provides a country-level regional consent decision; the Prayer Tracker Worker returns only whether consent is required and does not store the request or country decision.
Nonessential Firebase Analytics remains disabled in the personal web app, Church administration portal, and current mobile apps. Core authentication, billing verification, security, crash and error diagnostics, service reliability, and functional preferences remain operational. Legal-language and regional analytics choices may be stored locally as functional preferences. RevenueCat processes operational subscription and entitlement events for Personal Premium. Local reminders are scheduled on the device; push providers may process tokens and limited delivery data. Sensitive notifications are designed to omit prayer text and personal contact details.
Service Providers and Subprocessors
Prayer Tracker uses providers only for defined operational purposes. The current Subprocessor and Service Provider List identifies Google/Firebase/Google Cloud and Google Analytics 4, Apple and Google distribution services, RevenueCat, Resend, Stripe and Link, and Cloudflare. Not every provider receives every category of information, and Prayer Tracker does not provide prayer content to advertising services.
Providers may process information in the United States and other locations described in their own notices, subject to applicable contracts and safeguards. Prayer Tracker will provide at least 30 days’ notice before a material new Church-data subprocessor where feasible; urgent security or service-continuity changes may receive shorter notice with an explanation.
Sharing and Legal Disclosures
Prayer Tracker may disclose information to the providers above; to authorized group members or church representatives according to your use and permissions; at your direction or with consent; to complete a transaction; to investigate abuse and protect rights or safety; in a lawful transfer of the Services subject to appropriate protections; or when required by law. Prayer Tracker does not share personal information for cross-context behavioral advertising.
Retention and Backups
- Personal account and synchronized content are retained while active and until deletion, subject to backup expiration and limited required records.
- Active Church data is retained while the organization is active. Cancellation or failed payment does not automatically delete it.
- Private public-submission originals and contact details are retained while active and up to one year after answered, declined, or archived status, unless authorized deletion occurs sooner.
- Church audit events are retained for the life of an active organization and record actions and identifiers rather than duplicating sensitive content.
- Organization deletion has a 30-day recovery period; a deleted public slug is quarantined for 90 days; content-free deletion evidence may remain for one year.
- Generated exports expire after 24 hours.
- Production data uses seven-day point-in-time recovery and daily backups retained for 30 days. Data deleted from active systems may remain in recovery-only backups until those backups expire and is not used for ordinary access.
- Support, security, fraud-prevention, billing, tax, accounting, dispute, and legal records are retained only as reasonably necessary for their purpose and applicable obligations where no fixed period is established.
Deletion and Export
You can delete an individual account in the app or use the public deletion instructions. Synchronized personal content is deleted, but church-owned content may remain. Attribution is removed where appropriate, memberships are removed or deidentified, and limited content-free audit evidence may remain. A church owner must transfer ownership first.
Deleting an individual account does not cancel Apple, Google, or Church subscriptions. Those must be managed through the applicable store or billing controls.
Only the church owner may request organization deletion. Prayer Tracker requests cancellation of Church renewal at period end before starting a 30-day recovery period. The church becomes read-only and its public page is hidden; authorized administrators may export, and the owner may cancel deletion. Canceling deletion does not silently reactivate billing. After recovery, church groups, memberships, invitations, submissions, reports, exports, branding, public profile, and private organization records are deleted, subject to the limited retention described above.
Your Choices and Requests
You can choose whether to create an account, synchronize, join groups or churches, submit a request, provide contact details, enable notifications, make a purchase, or delete your account. Depending on applicable law, you may request access, correction, export, deletion, restriction, or objection by contacting Prayer Tracker. Identity and authority may need to be verified.
Security and International Processing
Prayer Tracker uses role-based authorization, server-controlled administrative actions, encrypted transport, restricted records, expiring or revocable invitation links, audit events, payload and rate limits, backups, and provider security controls. No method is completely secure, and information already displayed or downloaded cannot always be withdrawn from another device.
Information may be processed in the United States and other locations where providers operate. Prayer Tracker uses applicable contractual and technical safeguards for cross-border processing.
Changes, Reconsent, and Contact
Prayer Tracker may make nonmaterial changes by posting a revised Policy with a new effective date and providing notice where practical. For a material change affecting data use, ownership, billing, disputes, or legal rights, Prayer Tracker will seek affirmative acknowledgment from affected authenticated users before applying the change to the affected feature where required or appropriate.
The English version controls where permitted by law. The Spanish version is provided as a convenience translation.
Questions, privacy requests, or subprocessor concerns may be sent through the contact form or to support@theprayertracker.app.
Back to Prayer Tracker